@enbox/dwn-server 0.0.6 → 0.0.7

package/dist/esm/src/dwn-server.d.ts

@@ -5,6 +5,7 @@ import type { ProcessHandlers } from './process-handlers.js';
 import type { Server } from 'bun';
 import type { WsData } from './http-api.js';
 import { Dwn } from '@enbox/dwn-sdk-js';
+import { OpenAuthHandler } from './registration/open-auth-handler.js';
 import { RegistrationManager } from './registration/registration-manager.js';
 /**
  * Options for the DwnServer constructor.
@@ -26,6 +27,22 @@ export type DwnServerOptions = {
      * are appended after the DeliveryService hook.
      */
     messageProcessedHooks?: MessageProcessedHook[];
+    /**
+     * An externally created RegistrationManager to use as the tenant gate and
+     * registration endpoint handler. When a pre-built `dwn` is provided, the
+     * server cannot create its own RegistrationManager (because it doesn't
+     * control the DWN's TenantGate). Pass one here to enable registration
+     * endpoints (`POST /registration`, etc.) with a pre-built DWN.
+     */
+    registrationManager?: RegistrationManager;
+    /**
+     * An externally created OpenAuthHandler for the built-in provider-auth
+     * endpoints (`/provider-auth/authorize`, `/provider-auth/token`,
+     * `/provider-auth/refresh`). When a pre-built `dwn` is provided, the
+     * server skips creating this handler. Pass one here to enable the
+     * open-auth flow with a pre-built DWN.
+     */
+    openAuthHandler?: OpenAuthHandler;
 };
 /**
  * State of the DwnServer, either Stopped or Started, to help short-circuit start and stop logic.
@@ -46,7 +63,9 @@ export declare class DwnServer {
     dwn?: Dwn;
     config: DwnServerConfig;
     /**
-     * @param options.dwn - Dwn instance to use as an override. Registration endpoint will not be enabled if this is provided.
+     * @param options.dwn - Dwn instance to use as an override.
+     * @param options.registrationManager - External RegistrationManager to use with a pre-built DWN.
+     * @param options.openAuthHandler - External OpenAuthHandler to use with a pre-built DWN.
      */
     constructor(options?: DwnServerOptions);
     /**

package/dist/esm/src/dwn-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dwn-server.d.ts","sourceRoot":"","sources":["../../../src/dwn-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C,OAAO,EAAE,GAAG,EAAwB,MAAM,mBAAmB,CAAC;AAgB9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAM7E;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAChD,CAAC;AAEF;;GAEG;AACH,aAAK,cAAc;IACjB,OAAO,IAAA;IACP,OAAO,IAAA;CACR;AAED,qBAAa,SAAS;;IACpB,WAAW,iBAA0B;IACrC,eAAe,EAAE,eAAe,CAAC;IAEjC;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,EAAE,eAAe,CAAC;IASxB;;OAEG;gBACS,OAAO,GAAE,gBAAqB;IAa1C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+O5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC3B,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,CAE/B;IAED;;OAEG;IACH,IAAI,mBAAmB,IAAI,mBAAmB,CAE7C;CACF"}
+{"version":3,"file":"dwn-server.d.ts","sourceRoot":"","sources":["../../../src/dwn-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAElC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C,OAAO,EAAE,GAAG,EAAwB,MAAM,mBAAmB,CAAC;AAa9D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAGtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAM7E;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAE/C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,CAAC;AAEF;;GAEG;AACH,aAAK,cAAc;IACjB,OAAO,IAAA;IACP,OAAO,IAAA;CACR;AAED,qBAAa,SAAS;;IACpB,WAAW,iBAA0B;IACrC,eAAe,EAAE,eAAe,CAAC;IAEjC;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,EAAE,eAAe,CAAC;IAWxB;;;;OAIG;gBACS,OAAO,GAAE,gBAAqB;IAe1C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmQ5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC3B,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,CAE/B;IAED;;OAEG;IACH,IAAI,mBAAmB,IAAI,mBAAmB,CAE7C;CACF"}

package/dist/esm/src/dwn-server.js

@@ -44,14 +44,20 @@ export class DwnServer {
     #tenantRateLimiter;
     #auditLog;
     #externalHooks;
+    #externalRegistrationManager;
+    #externalOpenAuthHandler;
     /**
-     * @param options.dwn - Dwn instance to use as an override. Registration endpoint will not be enabled if this is provided.
+     * @param options.dwn - Dwn instance to use as an override.
+     * @param options.registrationManager - External RegistrationManager to use with a pre-built DWN.
+     * @param options.openAuthHandler - External OpenAuthHandler to use with a pre-built DWN.
      */
     constructor(options = {}) {
         this.config = options.config ?? defaultConfig;
         this.didResolver = options.didResolver;
         this.dwn = options.dwn;
         this.#externalHooks = options.messageProcessedHooks ?? [];
+        this.#externalRegistrationManager = options.registrationManager;
+        this.#externalOpenAuthHandler = options.openAuthHandler;
         log.setLevel(this.config.logLevel);
         prefix.reg(log);
         prefix.apply(log);
@@ -74,44 +80,8 @@ export class DwnServer {
     async #setupServer() {
         let registrationManager;
         if (!this.dwn) {
-            // Load provider auth plugin if configured.
-            let providerAuthPlugin;
-            if (this.config.providerAuthEnabled) {
-                if (this.config.providerAuthPluginPath) {
-                    // Custom external plugin.
-                    providerAuthPlugin = await loadProviderAuthPlugin(this.config.providerAuthPluginPath);
-                    log.info('Provider auth plugin loaded from path');
-                }
-                else if (this.config.providerAuthJwtSecret || this.config.providerAuthJwtJwksUrl) {
-                    // Built-in JWT plugin.
-                    providerAuthPlugin = await JwtProviderAuthPlugin.create({
-                        secret: this.config.providerAuthJwtSecret,
-                        jwksUrl: this.config.providerAuthJwtJwksUrl,
-                        issuer: this.config.baseUrl,
-                        audience: this.config.baseUrl,
-                    });
-                    log.info('Built-in JWT provider auth plugin created');
-                }
-            }
-            // undefined registrationStoreUrl is used as a signal that there is no need for tenant registration, DWN is open for all.
-            registrationManager = await RegistrationManager.create({
-                registrationStoreUrl: this.config.registrationStoreUrl,
-                termsOfServiceFilePath: this.config.termsOfServiceFilePath,
-                proofOfWorkChallengeNonceSeed: this.config.registrationProofOfWorkSeed,
-                proofOfWorkInitialMaximumAllowedHash: this.config.registrationProofOfWorkInitialMaxHash,
-                providerAuthPlugin,
-            });
-            // Warn if the tenant gate is active but no registration method is enabled.
-            // This is almost certainly a misconfiguration — new tenants will be rejected
-            // with 401 and have no way to register.
-            if (this.config.registrationStoreUrl
-                && !this.config.registrationProofOfWorkEnabled
-                && !providerAuthPlugin) {
-                log.warn('*** WARNING: DWN_REGISTRATION_STORE_URL is set (tenant gate active) but neither ' +
-                    'proof-of-work (DWN_REGISTRATION_PROOF_OF_WORK_ENABLED) nor provider auth ' +
-                    '(DWN_PROVIDER_AUTH_ENABLED + secret/plugin) is configured. ' +
-                    'New tenants will be unable to register. ***');
-            }
+            // No pre-built DWN — create everything from scratch including registration.
+            registrationManager = await this.#createRegistrationManager();
             let eventLog;
             if (this.config.webSocketSupport) {
                 // If EventLog plugin is not specified, use `EventEmitterEventLog` implementation as default.
@@ -137,6 +107,12 @@ export class DwnServer {
             });
             this.dwn = await Dwn.create(dwnConfig);
         }
+        else if (this.#externalRegistrationManager) {
+            // Pre-built DWN with an externally-provided RegistrationManager.
+            // The caller is responsible for passing this RegistrationManager as the
+            // TenantGate when creating the DWN instance.
+            registrationManager = this.#externalRegistrationManager;
+        }
         // Assemble message-processed hooks.
         const messageProcessedHooks = [];
         // Add the built-in DeliveryService hook when forwarding or delivery is enabled.
@@ -227,10 +203,13 @@ export class DwnServer {
         this.#auditLog = auditLog;
         // Create open-auth handler if provider auth is enabled with a JWT secret
         // and authorize/token URLs point to this server (or are not set — defaulting to built-in).
-        let openAuthHandler;
-        if (this.config.providerAuthEnabled && this.config.providerAuthJwtSecret && !this.config.providerAuthPluginPath) {
+        // An externally-provided handler (e.g. from the relay) takes precedence.
+        let openAuthHandler = this.#externalOpenAuthHandler;
+        if (!openAuthHandler && this.config.providerAuthEnabled && this.config.providerAuthJwtSecret && !this.config.providerAuthPluginPath) {
             openAuthHandler = OpenAuthHandler.create(this.config.providerAuthJwtSecret, this.config.baseUrl);
             log.info('Built-in open-auth endpoints enabled');
+        }
+        if (openAuthHandler) {
             // Auto-configure authorize/token/refresh URLs if not explicitly set.
             if (!this.config.providerAuthAuthorizeUrl) {
                 this.config.providerAuthAuthorizeUrl = `${this.config.baseUrl}/provider-auth/authorize`;
@@ -259,6 +238,51 @@ export class DwnServer {
             adminApi.startMetricsUpdater();
         }
     }
+    /**
+     * Creates a RegistrationManager based on the server config. Factored out of
+     * `#setupServer()` so the same logic can be reused regardless of whether the
+     * DWN is created internally or externally.
+     */
+    async #createRegistrationManager() {
+        // Load provider auth plugin if configured.
+        let providerAuthPlugin;
+        if (this.config.providerAuthEnabled) {
+            if (this.config.providerAuthPluginPath) {
+                // Custom external plugin.
+                providerAuthPlugin = await loadProviderAuthPlugin(this.config.providerAuthPluginPath);
+                log.info('Provider auth plugin loaded from path');
+            }
+            else if (this.config.providerAuthJwtSecret || this.config.providerAuthJwtJwksUrl) {
+                // Built-in JWT plugin.
+                providerAuthPlugin = await JwtProviderAuthPlugin.create({
+                    secret: this.config.providerAuthJwtSecret,
+                    jwksUrl: this.config.providerAuthJwtJwksUrl,
+                    issuer: this.config.baseUrl,
+                    audience: this.config.baseUrl,
+                });
+                log.info('Built-in JWT provider auth plugin created');
+            }
+        }
+        // undefined registrationStoreUrl is used as a signal that there is no need
+        // for tenant registration, DWN is open for all.
+        const registrationManager = await RegistrationManager.create({
+            registrationStoreUrl: this.config.registrationStoreUrl,
+            termsOfServiceFilePath: this.config.termsOfServiceFilePath,
+            proofOfWorkChallengeNonceSeed: this.config.registrationProofOfWorkSeed,
+            proofOfWorkInitialMaximumAllowedHash: this.config.registrationProofOfWorkInitialMaxHash,
+            providerAuthPlugin,
+        });
+        // Warn if the tenant gate is active but no registration method is enabled.
+        if (this.config.registrationStoreUrl
+            && !this.config.registrationProofOfWorkEnabled
+            && !providerAuthPlugin) {
+            log.warn('*** WARNING: DWN_REGISTRATION_STORE_URL is set (tenant gate active) but neither ' +
+                'proof-of-work (DWN_REGISTRATION_PROOF_OF_WORK_ENABLED) nor provider auth ' +
+                '(DWN_PROVIDER_AUTH_ENABLED + secret/plugin) is configured. ' +
+                'New tenants will be unable to register. ***');
+        }
+        return registrationManager;
+    }
     /**
      * Stops the DWN server.
      */

package/dist/esm/src/dwn-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"dwn-server.js","sourceRoot":"","sources":["../../../src/dwn-server.ts"],"names":[],"mappings":"AASA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxG,OAAO,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAI9D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAwBlF;;GAEG;AACH,IAAK,cAGJ;AAHD,WAAK,cAAc;IACjB,yDAAO,CAAA;IACP,yDAAO,CAAA;AACT,CAAC,EAHI,cAAc,KAAd,cAAc,QAGlB;AAED,MAAM,OAAO,SAAS;IACpB,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;IACrC,eAAe,CAAkB;IAEjC;;;OAGG;IACH,WAAW,CAAe;IAC1B,GAAG,CAAO;IACV,MAAM,CAAkB;IACxB,QAAQ,CAAU;IAClB,MAAM,CAAQ;IACd,SAAS,CAAuB;IAChC,cAAc,CAA0B;IACxC,kBAAkB,CAA0B;IAC5C,SAAS,CAAuB;IAChC,cAAc,CAAyB;IAEvC;;OAEG;IACH,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAE9C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;QAE1D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAA4B,CAAC,CAAC;QAEvD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,WAAW,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAEhB,IAAI,mBAAwC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,2CAA2C;YAC3C,IAAI,kBAAkD,CAAC;YACvD,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;oBACvC,0BAA0B;oBAC1B,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;oBACtF,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;gBACpD,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;oBACnF,uBAAuB;oBACvB,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC;wBACtD,MAAM,EAAK,IAAI,CAAC,MAAM,CAAC,qBAAqB;wBAC5C,OAAO,EAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB;wBAC7C,MAAM,EAAK,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC9B,QAAQ,EAAG,IAAI,CAAC,MAAM,CAAC,OAAO;qBAC/B,CAAC,CAAC;oBACH,GAAG,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,yHAAyH;YACzH,mBAAmB,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBACrD,oBAAoB,EAAmB,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBACvE,sBAAsB,EAAiB,IAAI,CAAC,MAAM,CAAC,sBAAsB;gBACzE,6BAA6B,EAAU,IAAI,CAAC,MAAM,CAAC,2BAA2B;gBAC9E,oCAAoC,EAAG,IAAI,CAAC,MAAM,CAAC,qCAAqC;gBACxF,kBAAkB;aACnB,CAAC,CAAC;YAEH,2EAA2E;YAC3E,6EAA6E;YAC7E,wCAAwC;YACxC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB;mBAC/B,CAAC,IAAI,CAAC,MAAM,CAAC,8BAA8B;mBAC3C,CAAC,kBAAkB,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CACN,kFAAkF;oBAClF,2EAA2E;oBAC3E,6DAA6D;oBAC7D,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YAED,IAAI,QAA8B,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACjC,6FAA6F;gBAC7F,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,EAAE,EAAE,CAAC;oBAC1F,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAW,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACrF,CAAC;YAEH,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,2EAA2E;YAC3E,4EAA4E;YAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,iBAAiB,CAAC;gBAC5D,YAAY,EAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/C,KAAK,EAAU,IAAI,sBAAsB,EAAE;aAC5C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChD,WAAW;gBACX,UAAU,EAAE,mBAAmB;gBAC/B,QAAQ;aACT,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAED,oCAAoC;QACpC,MAAM,qBAAqB,GAA2B,EAAE,CAAC;QAEzD,gFAAgF;QAChF,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACjE,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,iBAAiB,CAAC;gBACjE,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxF,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,MAAM,CAAC,iBAAiB,eAAe,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;QAChI,CAAC;QAED,oCAAoC;QACpC,qBAAqB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAEnD,wCAAwC;QACxC,IAAI,aAAsC,CAAC;QAC3C,IAAI,iBAA0C,CAAC;QAE/C,IAAI,IAAI,CAAC,MAAM,CAAC,0BAA0B,GAAG,CAAC,EAAE,CAAC;YAC/C,aAAa,GAAG,IAAI,WAAW,CAAC;gBAC9B,UAAU,EAAG,IAAI,CAAC,MAAM,CAAC,0BAA0B;gBACnD,SAAS,EAAI,IAAI,CAAC,MAAM,CAAC,cAAc;aACxC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,MAAM,CAAC,0BAA0B,iBAAiB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACjI,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,gCAAgC,GAAG,CAAC,EAAE,CAAC;YACrD,iBAAiB,GAAG,IAAI,WAAW,CAAC;gBAClC,UAAU,EAAG,IAAI,CAAC,MAAM,CAAC,gCAAgC;gBACzD,SAAS,EAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB;aAC9C,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,gCAAgC,iBAAiB,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACjJ,CAAC;QAED,MAAM,iBAAiB,GAAG,mBAAmB,EAAE,oBAAoB,EAAE,CAAC;QAEtE,wDAAwD;QACxD,IAAI,QAA8B,CAAC;QACnC,IAAI,WAAoC,CAAC;QACzC,IAAI,UAAkC,CAAC;QACvC,IAAI,QAA8B,CAAC;QACnC,IAAI,cAA0C,CAAC;QAE/C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC5C,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3C,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAEpE,yEAAyE;YACzE,kDAAkD;YAClD,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBAClF,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE;wBAC7C,UAAU,EAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;wBAC3C,OAAO,EAAM,IAAI,CAAC,MAAM,CAAC,eAAe;qBACzC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAED,kEAAkE;YAClE,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBACpF,cAAc,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC/D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAG,IAAI,CAAC,MAAM;gBACpB,GAAG,EAAM,IAAI,CAAC,GAAG;gBACjB,UAAU;gBACV,mBAAmB;gBACnB,iBAAiB;gBACjB,WAAW;gBACX,QAAQ;gBACR,aAAa;gBACb,iBAAiB;gBACjB,cAAc;aACf,CAAC,CAAC;YAEH,0CAA0C;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAE1B,yEAAyE;QACzE,2FAA2F;QAC3F,IAAI,eAA4C,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAChH,eAAe,GAAG,eAAe,CAAC,MAAM,CACtC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CACpB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YAEjD,qEAAqE;YACrE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,wBAAwB,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAClC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EACjE,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAC5G,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,CACrB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EACxE,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,CACjG,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAErC,gEAAgE;YAChE,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAEvB,gDAAgD;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAE5B,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE5C,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;IAC5C,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"dwn-server.js","sourceRoot":"","sources":["../../../src/dwn-server.ts"],"names":[],"mappings":"AASA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,MAAM,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxG,OAAO,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAI9D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AA0ClF;;GAEG;AACH,IAAK,cAGJ;AAHD,WAAK,cAAc;IACjB,yDAAO,CAAA;IACP,yDAAO,CAAA;AACT,CAAC,EAHI,cAAc,KAAd,cAAc,QAGlB;AAED,MAAM,OAAO,SAAS;IACpB,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;IACrC,eAAe,CAAkB;IAEjC;;;OAGG;IACH,WAAW,CAAe;IAC1B,GAAG,CAAO;IACV,MAAM,CAAkB;IACxB,QAAQ,CAAU;IAClB,MAAM,CAAQ;IACd,SAAS,CAAuB;IAChC,cAAc,CAA0B;IACxC,kBAAkB,CAA0B;IAC5C,SAAS,CAAuB;IAChC,cAAc,CAAyB;IACvC,4BAA4B,CAAkC;IAC9D,wBAAwB,CAA8B;IAEtD;;;;OAIG;IACH,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAE9C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,4BAA4B,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAChE,IAAI,CAAC,wBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC;QAExD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAA4B,CAAC,CAAC;QAEvD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,WAAW,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAEhB,IAAI,mBAAoD,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,4EAA4E;YAC5E,mBAAmB,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAE9D,IAAI,QAA8B,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACjC,6FAA6F;gBAC7F,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,EAAE,EAAE,CAAC;oBAC1F,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAW,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACrF,CAAC;YAEH,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,2EAA2E;YAC3E,4EAA4E;YAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,iBAAiB,CAAC;gBAC5D,YAAY,EAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/C,KAAK,EAAU,IAAI,sBAAsB,EAAE;aAC5C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChD,WAAW;gBACX,UAAU,EAAE,mBAAmB;gBAC/B,QAAQ;aACT,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAC7C,iEAAiE;YACjE,wEAAwE;YACxE,6CAA6C;YAC7C,mBAAmB,GAAG,IAAI,CAAC,4BAA4B,CAAC;QAC1D,CAAC;QAED,oCAAoC;QACpC,MAAM,qBAAqB,GAA2B,EAAE,CAAC;QAEzD,gFAAgF;QAChF,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACjE,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,iBAAiB,CAAC;gBACjE,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxF,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,MAAM,CAAC,iBAAiB,eAAe,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;QAChI,CAAC;QAED,oCAAoC;QACpC,qBAAqB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAEnD,wCAAwC;QACxC,IAAI,aAAsC,CAAC;QAC3C,IAAI,iBAA0C,CAAC;QAE/C,IAAI,IAAI,CAAC,MAAM,CAAC,0BAA0B,GAAG,CAAC,EAAE,CAAC;YAC/C,aAAa,GAAG,IAAI,WAAW,CAAC;gBAC9B,UAAU,EAAG,IAAI,CAAC,MAAM,CAAC,0BAA0B;gBACnD,SAAS,EAAI,IAAI,CAAC,MAAM,CAAC,cAAc;aACxC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,MAAM,CAAC,0BAA0B,iBAAiB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACjI,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,gCAAgC,GAAG,CAAC,EAAE,CAAC;YACrD,iBAAiB,GAAG,IAAI,WAAW,CAAC;gBAClC,UAAU,EAAG,IAAI,CAAC,MAAM,CAAC,gCAAgC;gBACzD,SAAS,EAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB;aAC9C,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,gCAAgC,iBAAiB,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACjJ,CAAC;QAED,MAAM,iBAAiB,GAAG,mBAAmB,EAAE,oBAAoB,EAAE,CAAC;QAEtE,wDAAwD;QACxD,IAAI,QAA8B,CAAC;QACnC,IAAI,WAAoC,CAAC;QACzC,IAAI,UAAkC,CAAC;QACvC,IAAI,QAA8B,CAAC;QACnC,IAAI,cAA0C,CAAC;QAE/C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC5C,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3C,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAEpE,yEAAyE;YACzE,kDAAkD;YAClD,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBAClF,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE;wBAC7C,UAAU,EAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;wBAC3C,OAAO,EAAM,IAAI,CAAC,MAAM,CAAC,eAAe;qBACzC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAED,kEAAkE;YAClE,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBACpF,cAAc,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC/D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAG,IAAI,CAAC,MAAM;gBACpB,GAAG,EAAM,IAAI,CAAC,GAAG;gBACjB,UAAU;gBACV,mBAAmB;gBACnB,iBAAiB;gBACjB,WAAW;gBACX,QAAQ;gBACR,aAAa;gBACb,iBAAiB;gBACjB,cAAc;aACf,CAAC,CAAC;YAEH,0CAA0C;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAE1B,yEAAyE;QACzE,2FAA2F;QAC3F,yEAAyE;QACzE,IAAI,eAAe,GAAgC,IAAI,CAAC,wBAAwB,CAAC;QACjF,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACpI,eAAe,GAAG,eAAe,CAAC,MAAM,CACtC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CACpB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,qEAAqE;YACrE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,wBAAwB,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAClC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EACjE,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAC5G,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,CACrB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EACxE,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,CACjG,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAErC,gEAAgE;YAChE,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,0BAA0B;QAC9B,2CAA2C;QAC3C,IAAI,kBAAkD,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACvC,0BAA0B;gBAC1B,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACtF,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACnF,uBAAuB;gBACvB,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC;oBACtD,MAAM,EAAK,IAAI,CAAC,MAAM,CAAC,qBAAqB;oBAC5C,OAAO,EAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB;oBAC7C,MAAM,EAAK,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC9B,QAAQ,EAAG,IAAI,CAAC,MAAM,CAAC,OAAO;iBAC/B,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,gDAAgD;QAChD,MAAM,mBAAmB,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC;YAC3D,oBAAoB,EAAmB,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACvE,sBAAsB,EAAiB,IAAI,CAAC,MAAM,CAAC,sBAAsB;YACzE,6BAA6B,EAAU,IAAI,CAAC,MAAM,CAAC,2BAA2B;YAC9E,oCAAoC,EAAG,IAAI,CAAC,MAAM,CAAC,qCAAqC;YACxF,kBAAkB;SACnB,CAAC,CAAC;QAEH,2EAA2E;QAC3E,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB;eAC/B,CAAC,IAAI,CAAC,MAAM,CAAC,8BAA8B;eAC3C,CAAC,kBAAkB,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CACN,kFAAkF;gBAClF,2EAA2E;gBAC3E,6DAA6D;gBAC7D,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAEvB,gDAAgD;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAE5B,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE5C,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;IAC5C,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC3C,CAAC;CACF"}

package/dist/esm/src/index.d.ts

@@ -6,6 +6,8 @@ export { DwnServer, DwnServerOptions } from './dwn-server.js';
 export { HttpApi } from './http-api.js';
 export { jsonRpcRouter } from './json-rpc-api.js';
 export type { MessageProcessedContext, MessageProcessedHook } from './message-processed-hook.js';
+export { OpenAuthHandler } from './registration/open-auth-handler.js';
+export { RegistrationManager } from './registration/registration-manager.js';
 export { getDwnConfig, StoreType, BackendTypes, DwnStore } from './storage.js';
 export { WsApi } from './ws-api.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}

package/dist/esm/src/index.js

@@ -4,6 +4,8 @@ export { DeliveryService } from './delivery-service.js';
 export { DwnServer } from './dwn-server.js';
 export { HttpApi } from './http-api.js';
 export { jsonRpcRouter } from './json-rpc-api.js';
+export { OpenAuthHandler } from './registration/open-auth-handler.js';
+export { RegistrationManager } from './registration/registration-manager.js';
 export { getDwnConfig, StoreType, BackendTypes } from './storage.js';
 export { WsApi } from './ws-api.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASrE,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAmB,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAY,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASrE,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAmB,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAY,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@enbox/dwn-server",
   "type": "module",
-  "version": "0.0.6",
+  "version": "0.0.7",
   "license": "Apache-2.0",
   "files": [
     "dist",

package/src/dwn-server.ts

@@ -52,6 +52,24 @@ export type DwnServerOptions = {
    * are appended after the DeliveryService hook.
    */
   messageProcessedHooks?: MessageProcessedHook[];
+
+  /**
+   * An externally created RegistrationManager to use as the tenant gate and
+   * registration endpoint handler. When a pre-built `dwn` is provided, the
+   * server cannot create its own RegistrationManager (because it doesn't
+   * control the DWN's TenantGate). Pass one here to enable registration
+   * endpoints (`POST /registration`, etc.) with a pre-built DWN.
+   */
+  registrationManager?: RegistrationManager;
+
+  /**
+   * An externally created OpenAuthHandler for the built-in provider-auth
+   * endpoints (`/provider-auth/authorize`, `/provider-auth/token`,
+   * `/provider-auth/refresh`). When a pre-built `dwn` is provided, the
+   * server skips creating this handler. Pass one here to enable the
+   * open-auth flow with a pre-built DWN.
+   */
+  openAuthHandler?: OpenAuthHandler;
 };
 
 /**
@@ -80,9 +98,13 @@ export class DwnServer {
   #tenantRateLimiter: RateLimiter | undefined;
   #auditLog: AuditLog | undefined;
   #externalHooks: MessageProcessedHook[];
+  #externalRegistrationManager: RegistrationManager | undefined;
+  #externalOpenAuthHandler: OpenAuthHandler | undefined;
 
   /**
-   * @param options.dwn - Dwn instance to use as an override. Registration endpoint will not be enabled if this is provided.
+   * @param options.dwn - Dwn instance to use as an override.
+   * @param options.registrationManager - External RegistrationManager to use with a pre-built DWN.
+   * @param options.openAuthHandler - External OpenAuthHandler to use with a pre-built DWN.
    */
   constructor(options: DwnServerOptions = {}) {
     this.config = options.config ?? defaultConfig;
@@ -90,6 +112,8 @@ export class DwnServer {
     this.didResolver = options.didResolver;
     this.dwn = options.dwn;
     this.#externalHooks = options.messageProcessedHooks ?? [];
+    this.#externalRegistrationManager = options.registrationManager;
+    this.#externalOpenAuthHandler = options.openAuthHandler;
 
     log.setLevel(this.config.logLevel as log.LogLevelDesc);
 
@@ -116,49 +140,11 @@ export class DwnServer {
    */
   async #setupServer(): Promise<void> {
 
-    let registrationManager: RegistrationManager;
-    if (!this.dwn) {
-      // Load provider auth plugin if configured.
-      let providerAuthPlugin: ProviderAuthPlugin | undefined;
-      if (this.config.providerAuthEnabled) {
-        if (this.config.providerAuthPluginPath) {
-          // Custom external plugin.
-          providerAuthPlugin = await loadProviderAuthPlugin(this.config.providerAuthPluginPath);
-          log.info('Provider auth plugin loaded from path');
-        } else if (this.config.providerAuthJwtSecret || this.config.providerAuthJwtJwksUrl) {
-          // Built-in JWT plugin.
-          providerAuthPlugin = await JwtProviderAuthPlugin.create({
-            secret   : this.config.providerAuthJwtSecret,
-            jwksUrl  : this.config.providerAuthJwtJwksUrl,
-            issuer   : this.config.baseUrl,
-            audience : this.config.baseUrl,
-          });
-          log.info('Built-in JWT provider auth plugin created');
-        }
-      }
+    let registrationManager: RegistrationManager | undefined;
 
-      // undefined registrationStoreUrl is used as a signal that there is no need for tenant registration, DWN is open for all.
-      registrationManager = await RegistrationManager.create({
-        registrationStoreUrl                 : this.config.registrationStoreUrl,
-        termsOfServiceFilePath               : this.config.termsOfServiceFilePath,
-        proofOfWorkChallengeNonceSeed        : this.config.registrationProofOfWorkSeed,
-        proofOfWorkInitialMaximumAllowedHash : this.config.registrationProofOfWorkInitialMaxHash,
-        providerAuthPlugin,
-      });
-
-      // Warn if the tenant gate is active but no registration method is enabled.
-      // This is almost certainly a misconfiguration — new tenants will be rejected
-      // with 401 and have no way to register.
-      if (this.config.registrationStoreUrl
-        && !this.config.registrationProofOfWorkEnabled
-        && !providerAuthPlugin) {
-        log.warn(
-          '*** WARNING: DWN_REGISTRATION_STORE_URL is set (tenant gate active) but neither ' +
-          'proof-of-work (DWN_REGISTRATION_PROOF_OF_WORK_ENABLED) nor provider auth ' +
-          '(DWN_PROVIDER_AUTH_ENABLED + secret/plugin) is configured. ' +
-          'New tenants will be unable to register. ***',
-        );
-      }
+    if (!this.dwn) {
+      // No pre-built DWN — create everything from scratch including registration.
+      registrationManager = await this.#createRegistrationManager();
 
       let eventLog: EventLog | undefined;
       if (this.config.webSocketSupport) {
@@ -186,6 +172,11 @@ export class DwnServer {
         eventLog,
       });
       this.dwn = await Dwn.create(dwnConfig);
+    } else if (this.#externalRegistrationManager) {
+      // Pre-built DWN with an externally-provided RegistrationManager.
+      // The caller is responsible for passing this RegistrationManager as the
+      // TenantGate when creating the DWN instance.
+      registrationManager = this.#externalRegistrationManager;
     }
 
     // Assemble message-processed hooks.
@@ -291,14 +282,17 @@ export class DwnServer {
 
     // Create open-auth handler if provider auth is enabled with a JWT secret
     // and authorize/token URLs point to this server (or are not set — defaulting to built-in).
-    let openAuthHandler: OpenAuthHandler | undefined;
-    if (this.config.providerAuthEnabled && this.config.providerAuthJwtSecret && !this.config.providerAuthPluginPath) {
+    // An externally-provided handler (e.g. from the relay) takes precedence.
+    let openAuthHandler: OpenAuthHandler | undefined = this.#externalOpenAuthHandler;
+    if (!openAuthHandler && this.config.providerAuthEnabled && this.config.providerAuthJwtSecret && !this.config.providerAuthPluginPath) {
       openAuthHandler = OpenAuthHandler.create(
         this.config.providerAuthJwtSecret,
         this.config.baseUrl,
       );
       log.info('Built-in open-auth endpoints enabled');
+    }
 
+    if (openAuthHandler) {
       // Auto-configure authorize/token/refresh URLs if not explicitly set.
       if (!this.config.providerAuthAuthorizeUrl) {
         this.config.providerAuthAuthorizeUrl = `${this.config.baseUrl}/provider-auth/authorize`;
@@ -339,6 +333,56 @@ export class DwnServer {
     }
   }
 
+  /**
+   * Creates a RegistrationManager based on the server config. Factored out of
+   * `#setupServer()` so the same logic can be reused regardless of whether the
+   * DWN is created internally or externally.
+   */
+  async #createRegistrationManager(): Promise<RegistrationManager> {
+    // Load provider auth plugin if configured.
+    let providerAuthPlugin: ProviderAuthPlugin | undefined;
+    if (this.config.providerAuthEnabled) {
+      if (this.config.providerAuthPluginPath) {
+        // Custom external plugin.
+        providerAuthPlugin = await loadProviderAuthPlugin(this.config.providerAuthPluginPath);
+        log.info('Provider auth plugin loaded from path');
+      } else if (this.config.providerAuthJwtSecret || this.config.providerAuthJwtJwksUrl) {
+        // Built-in JWT plugin.
+        providerAuthPlugin = await JwtProviderAuthPlugin.create({
+          secret   : this.config.providerAuthJwtSecret,
+          jwksUrl  : this.config.providerAuthJwtJwksUrl,
+          issuer   : this.config.baseUrl,
+          audience : this.config.baseUrl,
+        });
+        log.info('Built-in JWT provider auth plugin created');
+      }
+    }
+
+    // undefined registrationStoreUrl is used as a signal that there is no need
+    // for tenant registration, DWN is open for all.
+    const registrationManager = await RegistrationManager.create({
+      registrationStoreUrl                 : this.config.registrationStoreUrl,
+      termsOfServiceFilePath               : this.config.termsOfServiceFilePath,
+      proofOfWorkChallengeNonceSeed        : this.config.registrationProofOfWorkSeed,
+      proofOfWorkInitialMaximumAllowedHash : this.config.registrationProofOfWorkInitialMaxHash,
+      providerAuthPlugin,
+    });
+
+    // Warn if the tenant gate is active but no registration method is enabled.
+    if (this.config.registrationStoreUrl
+      && !this.config.registrationProofOfWorkEnabled
+      && !providerAuthPlugin) {
+      log.warn(
+        '*** WARNING: DWN_REGISTRATION_STORE_URL is set (tenant gate active) but neither ' +
+        'proof-of-work (DWN_REGISTRATION_PROOF_OF_WORK_ENABLED) nor provider auth ' +
+        '(DWN_PROVIDER_AUTH_ENABLED + secret/plugin) is configured. ' +
+        'New tenants will be unable to register. ***',
+      );
+    }
+
+    return registrationManager;
+  }
+
   /**
    * Stops the DWN server.
    */

package/src/index.ts

@@ -13,5 +13,7 @@ export { DwnServer, DwnServerOptions } from './dwn-server.js';
 export { HttpApi } from './http-api.js';
 export { jsonRpcRouter } from './json-rpc-api.js';
 export type { MessageProcessedContext, MessageProcessedHook } from './message-processed-hook.js';
+export { OpenAuthHandler } from './registration/open-auth-handler.js';
+export { RegistrationManager } from './registration/registration-manager.js';
 export { getDwnConfig, StoreType, BackendTypes, DwnStore } from './storage.js';
 export { WsApi } from './ws-api.js';